CVE-2017-0508: Critical severity android vulnerability
An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33940449.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0508?
CVE-2017-0508 is rated as Critical due to the potential for local permanent device compromise.
How do I fix CVE-2017-0508?
To mitigate CVE-2017-0508, update the affected system to the latest version of the Linux kernel or Android that addresses this vulnerability.
What types of systems are affected by CVE-2017-0508?
CVE-2017-0508 affects the Linux kernel version 3.18 and certain versions of the Android operating system.
What impact can CVE-2017-0508 have on an affected device?
CVE-2017-0508 could allow a local malicious application to execute arbitrary code in the kernel, leading to compromised device security.
Who can exploit CVE-2017-0508?
CVE-2017-0508 can be exploited by local attackers who have access to the device to gain elevated privileges.